CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.

Several vulnerabilities were discovered in the GIMP which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789).

Updated gimp packages fix security vulnerabilities:

Several vulnerabilities were discovered in GIMP which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789).

Also, the webkit1-based help browser plugin has been disabled in favor of using an external browser for the help pages. This is due to security issues in webkit.

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

This update was imported from the SUSE:SLE-15:Update update project.

This update for gimp fixes the following issues:

• Fix for crashing due to segmentation fault caused by importing ghostscript files. (bsc#1161998)

Security issues fixed:

• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625)
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626)
• CVE-2017-17788: Fixed an out-of-bounds read in XCF (bsc#1073629)

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

This update for gimp fixes the following issues:

• CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).
• CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).
• CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).

It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially crafted image, an attacker could possibly use this to execute arbitrary code. (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788, CVE-2017-17789)